Lead Azure Architect

Lead Azure Engineer with Architecture experience

Hybrid

Chandler, AZ

Azure Cloud Architect with strong knowledge of Database Platforms, Hands‑on Terraform experience and Strong CICD expertise.

As part of CTI strategic priorities and Bigrock5 public deliverables this position is required to design and deliver Azure‑based Database Platforms as a Service (DBaaS) for our CIO partners. This role will focus on enabling secure, compliant, and standardized Azure database services delivered end‑to‑end using Infrastructure as Code (IaC) with Terraform.

To meet aggressive delivery timelines we require an Azure Cloud Architect who can design, build and maintain Terraform modules that fully conform to Bank enterprise standards including:

• Azure IAM Entra
• Backup and restore policies
• Patch management and minor upgrades
• MRF standards
• Data protection DAR DIT
• Cryptography and key management standards
• Vaulting and secrets compliance
• Baseline and security compliance

This role is also responsible for ensuring the solution satisfies ITAM CSDB and internal audit requirements. The candidate will test Terraform modules in Engineering Lab environments, identify defects and collaborate with engineering and platform teams to remediate issues. Additionally the role will own CICD automation for Terraform deployments using Bitbucket and Terraform Enterprise (TFE).

Azure Cloud Architect with strong hands‑on experience in designing Azure solutions and building Terraform‑based IaC modules with proven experience implementing enterprise‑grade CICD pipelines for cloud infrastructure.

• Azure Architecture with strong knowledge of Database Platforms, Hands‑on experience with Terraform, Strong CICD implementation experience.
• Terraform Enterprise (TFE) experience preferred.
• Ansible playbook experience is a plus.

• Strong Azure Cloud Architecture experience (7 years) designing secure, scalable, highly available solutions across multisubscription and multiregion environments.
• Hands‑on Terraform experience (7 years) building reusable IaC modules, managing remote state work spaces, and environment promotion patterns.
• Terraform Enterprise (TFE) expertise including workspace design, VCS‑driven workflows, policy as code, Sentinel/OPA where applicable and run governance.
• Strong CICD experience implementing Terraform automation using Azure Dev Ops, Git Hub Actions or Bitbucket Pipelines with approvals and quality gates.
• Deep knowledge of Azure database platforms:
  Azure SQL, SQL MI, Azure Postgre
  
  SQL, MySQL, Cosmos DB, Redis including HADR, backup and performance tuning.
• Hands‑on Azure IAM Entra : RBAC, managed identities, service principals, least‑privilege design and enterprise SSO federation.
• Azure networking expertise: VNets, subnets, NSGs, UDRs, Private Endpoints, Private Link, DNS and hybrid connectivity (Express Route, VPN).
• Strong security and compliance mindset covering Key Vault, CMK encryption, DARDIT secrets‑management, logging, monitoring and baseline compliance.
• Experience working in regulated enterprise environments (Banking preferred) with ITAM, CSDB audit and policy adherence requirements.
• Automation experience using Ansible for configuration management and post‑provisioning tasks.

• Terraform (Enterprise)
• Strong understanding of enterprise governance and compliance frameworks.
• Experience with CICD tools:
  Azure Dev Ops, Git Hub, Bitbucket, Jenkins X.

• Comprehensive Medical Plan covering Medical, Dental, Vision.
• Short Term and Long‑Term Disability Coverage.
• 401(k) Plan with Company match.
• Life Insurance.
• Vacation Time, Sick Leave, Paid Holidays.
• Paid Paternity and Maternity Leave.

The range displayed on each job posting reflects the minimum and maximum salary target for the position across all US locations. Within the range, individual pay is determined by work location and job level and additional factors including job‑related skills, experience, and relevant education or training. Depending on the position offered, other forms of compensation may be provided as part of overall compensation, such as an annual performance‑based bonus, sales incentive pay…